[ovirt-users] Re: [External] : Enroll Certificate
Hi,
Did you notice you are testing the cockpit certificate, not any oVirt related
certificate?
Any procedure to renew oVirt certificates will not touch the cockpit self-signed
certificates.
By default, the cockpit ssl certificate is automatically renewed before expiring and
don't need to worry about it.
Anyway, you can generate it manually using the /usr/libexec/cockpit-certificate-helper
script.
Marcos
-----Original Message-----
From: Денис Панкратьев <pankratiev(a)gmail.com>
Sent: Wednesday, December 4, 2024 7:43 AM
To: users(a)ovirt.org
Subject: [External] : [ovirt-users] Enroll Certificate
Hello!
My ovirt host (4.5.5) certificate is about to expire (in 46 days, Jan 20, 2025).
d.pankratiev@zabbix ~]$ echo | openssl s_client -servername ovirt1.gtc.local -connect
XXX.XXX.XXX.XXX.XXX:9090 2>/dev/null | openssl x509 -noout -dates 2>/dev/null
notBefore=Dec 22 05:27:04 2023 GMT notAfter=Jan 20 05:27:04 2025 GMT
1. I have migrated all VMs to another host 2. I put the host in maintenance mode
(Managеment -> Maintenance) 3. Do enroll certificate (Installation -> Enroll
Certificate) 4. Everything went successfully, without errors (Enrolling certificate for
host ovirt1.gtc.local was completed successfully).
But the certificate date did not change, still expire (after 46 days, Jan 20 2025).
d.pankratiev@zabbix ~]$ echo | openssl s_client -servername ovirt1.gtc.local -connect
XXX.XXX.XXX.XXX.XXX:9090 2>/dev/null | openssl x509 -noout -dates 2>/dev/null
notBefore=Dec 22 05:27:04 2023 GMT notAfter=Jan 20 05:27:04 2025 GMT
What did I do wrong? Is there anything else I need to do?
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement:
https://urldefense.com/v3/__https://www.ovirt.org/privacy-policy.html__;!...
oVirt Code of Conduct:
https://urldefense.com/v3/__https://www.ovirt.org/community/about/communi...
List Archives:
https://urldefense.com/v3/__https://lists.ovirt.org/archives/list/users@o...